ScanMalware.com

Security Scan Report: postg1.vercel.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6f671881-815e-4465-a597-74180c941e12Domain and IP registration (RDAP)/api/v1/rdap/6f671881-815e-4465-a597-74180c941e12How often this domain was scanned/api/v1/domain/stats/postg1.vercel.appScan history for this domain/api/v1/domain/history/postg1.vercel.app?limit=15
This website contacted 3 IPs in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://postg1.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Phishing clone of Swiss Post's IncaMail login hosted on a vercel.app subdomain. Email and password are harvested via /api/code.php; Google Safe Browsing flags social engineering. Never enter credentials there.

Risk Factors (5)
Brand impersonation of Swiss Post / IncaMail on a non-official domain
Credential harvesting form posting to a PHP endpoint on the phishing host
Google Safe Browsing Social Engineering detection
Free hosting-platform subdomain with unknown actual age
IDS alerts for actor-abused cloud hosting service
Domain age information unavailable

Details

Page Title

IncaMail

Scan Type

public

Domain Name Analysis

The domain name 'postg1.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'postg1'. Count 6 characters in 'vercel' holding two vowels versus four consonants. Segmentation suggests two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://postg1.vercel.app/

Page Load Overview

0.27s
Total Load Time
107 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:566 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service46% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
46%
technology software
34%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
364.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
103--

Detected Technologies3

PasswordField
100%
Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AA82755A21F316756913A8A96BEB1B456624C003D40BED2C7FDC138C8FCB6C59EA338D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:8rEInOThm0h5BokCN1yc9kGo1NlnvIqNvufAlnW5cric0cScs+RdDWg+vPircZAj:8rEOqpZVNHRtX+uGIBnvX1Xca

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17910:KUYZfc2Ek0MMAogmwpTCIgPARaIAgMpQQidET4AqBFTDX+kiepowEYABENwCVgDB8BBRwQISwEGsIboYCyeFWAYSSIABhkUC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fac3c30322c2400
Perceptual Hash:e689b3c464999be4
Difference Hash:a86878242448080c
Wavelet Hash:7fbd2f3f302c2400
Color Hash:#1f5393

Other Hashes

Crop Resistant:a86878242448080c

Scan History

Scan history not available

Unable to load historical scan data